Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/28797ea9-bb35-324d-94f4-540f566dee99.roa
File:                     28797ea9-bb35-324d-94f4-540f566dee99.roa (raw, json)
Hash identifier:          1bxIdEW9Wkdnmxd/ILCTKn4At+r773HmxPwI/wyDjyg=
Subject key identifier:   47:0B:8E:44:7B:43:1C:3D:75:B3:9B:43:42:A9:02:75:89:76:EC:89
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584EA78F27DB686B0199F813FAEC
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/28797ea9-bb35-324d-94f4-540f566dee99.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20477
IP address blocks:        137.118.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:27:db:68:6b:01:99:f8:13:fa:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d2c42102-4b49-4485-8747-05fc0a0777ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:8b:6d:f9:0a:af:77:98:8f:ba:ae:62:8a:
                    7b:af:fb:14:d8:af:92:6f:9b:d6:83:6b:b3:77:c4:
                    90:dd:e9:e8:2a:67:a5:d3:fb:dc:84:fb:a2:e3:97:
                    f4:7c:cb:bc:b9:e9:af:3e:10:7a:2b:ff:1b:fa:36:
                    3a:67:03:b5:13:f1:e6:8d:d1:f9:9d:b6:6a:01:62:
                    45:14:29:d1:83:a4:1c:9e:a5:5b:21:bb:36:a2:36:
                    73:eb:bd:55:d0:c1:01:6c:c1:bd:02:85:f4:97:a3:
                    68:a3:b8:08:b9:c2:6d:ca:cc:e9:39:ab:0e:01:08:
                    37:53:02:b6:17:e8:cf:05:4a:23:26:89:c8:e7:ca:
                    a4:99:e9:b8:aa:bf:e8:ab:e2:d2:a3:ff:fc:03:68:
                    2c:90:f0:c3:4b:e7:cf:b2:c6:fd:8d:8b:c7:c5:de:
                    00:a4:fd:29:24:da:c7:63:45:79:45:e5:5a:56:a0:
                    6f:a0:03:9d:3d:16:99:42:d6:21:5b:44:e5:7a:9d:
                    76:e3:44:61:41:9a:54:aa:53:b4:96:67:28:63:62:
                    5c:5d:7f:23:83:1a:fe:5e:af:3e:6d:25:42:c8:c3:
                    0a:d3:ad:ac:4b:d5:c9:00:ae:2c:21:48:00:40:78:
                    9c:68:60:e7:b7:84:35:7e:b6:9a:65:98:85:ed:d5:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0B:8E:44:7B:43:1C:3D:75:B3:9B:43:42:A9:02:75:89:76:EC:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/28797ea9-bb35-324d-94f4-540f566dee99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:de:e7:f0:ab:51:38:4d:a4:17:97:82:9a:c5:aa:fd:74:29:
         fb:41:82:38:9f:c2:bb:a8:3e:c8:13:c0:90:72:24:6c:b4:7f:
         94:ec:e2:56:68:7e:90:0b:85:55:f0:6f:9c:6d:0a:24:cf:65:
         18:10:6b:89:ab:3f:f5:28:22:e6:ba:a4:1e:de:18:ea:bb:c8:
         6c:79:ad:cc:a4:2e:da:51:b4:12:46:2a:44:cc:c0:7a:de:1b:
         28:c3:55:e0:4f:36:a6:25:93:a3:a4:6b:bd:6e:fa:54:7a:83:
         81:17:5f:51:70:c3:8e:19:5a:8a:85:ae:73:d6:58:34:01:2d:
         86:eb:a8:f3:0b:48:f7:fb:09:fc:79:51:3d:d2:22:78:df:0f:
         f7:d4:df:c0:bd:d8:a8:8c:8b:de:4e:c1:ea:92:11:6a:63:3d:
         d0:c4:60:d2:ed:89:db:59:16:4f:67:30:f8:d6:65:33:18:95:
         66:7e:7b:ae:06:2c:a6:cb:de:06:14:43:6c:a3:1d:bb:04:8b:
         4d:5d:b3:29:10:9e:25:87:fb:9d:15:af:5e:cb:ba:40:de:25:
         a4:49:00:d2:19:e7:55:9c:17:06:6b:f4:28:67:21:1b:55:26:
         19:3d:81:4a:b7:91:1a:cb:89:58:f6:6d:6e:e6:77:dc:b9:49:
         8b:83:62:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:25:43 2026 by rpki-client